From c9f5c086c29b928f29e5dea6ec3f3cac5545e2d1 Mon Sep 17 00:00:00 2001 From: Arvind Thirumurugan Date: Mon, 28 Aug 2023 12:16:32 -0700 Subject: [PATCH] disable fleet guard rail by default (#508) --- cmd/hubagent/options/options.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cmd/hubagent/options/options.go b/cmd/hubagent/options/options.go index 6601e5502..d55ef2d5c 100644 --- a/cmd/hubagent/options/options.go +++ b/cmd/hubagent/options/options.go @@ -100,7 +100,7 @@ func (o *Options) AddFlags(flags *flag.FlagSet) { flags.DurationVar(&o.LeaderElection.LeaseDuration.Duration, "leader-lease-duration", 15*time.Second, "This is effectively the maximum duration that a leader can be stopped before someone else will replace it.") flag.StringVar(&o.LeaderElection.ResourceNamespace, "leader-election-namespace", utils.FleetSystemNamespace, "The namespace in which the leader election resource will be created.") flag.BoolVar(&o.EnableWebhook, "enable-webhook", true, "If set, the fleet webhook is enabled.") - flag.BoolVar(&o.EnableGuardRail, "enable-guard-rail", true, "If set, the fleet guard rail webhook configurations are enabled.") + flag.BoolVar(&o.EnableGuardRail, "enable-guard-rail", false, "If set, the fleet guard rail webhook configurations are enabled.") flag.StringVar(&o.WhiteListedUsers, "whitelisted-users", "", "If set, white listed users can modify fleet related resources.") flag.StringVar(&o.WebhookClientConnectionType, "webhook-client-connection-type", "url", "Sets the connection type used by the webhook client. Only URL or Service is valid.") flag.BoolVar(&o.NetworkingAgentsEnabled, "networking-agents-enabled", false, "Whether the networking agents are enabled or not.")